A Quantum Measurement Scenario which Requires Exponential 
Classical Communication for Simulation 
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Abstract 

In this paper we consider the following question: how 
many bits of classical communication and shared ran- 
dom bits are necessary to simulate a quantum protocol 
involving Alice and Bob where they share k entangled 
quantum bits and do not communicate at all. We prove 
that 2 k classical bits are necessary, even if the classical 
protocol is allowed an e chance of failure. 



1. Introduction 

Quantifying the power of shared entanglement is a 
fundamental goal of quantum information theory. In 
this paper, we compare the power of shared entangle- 
ment to the power of classical correlations with com- 
munication by considering the following restricted type 
of quantum protocol, which we call sampling-using- 
entanglement: Alice and Bob are two parties which 
are not allowed to communicate with each other, but 
they share k entangled quantum bits. Each party 
makes a generalized measurement on his quantum bits. 

We compare this protocol to a classical simulation 
of it, where Alice and Bob use classical correlations 
while communicating classical bits to sample from a 
distribution that is e-close of the distribution resulting 
from the quantum protocol. 

The cost of the classical simulation is the sum of the 
number of shared random bits and the number of clas- 
sical bits communicated between the two parties. The 
number of shared random bits is the classical analogue 
to the amount of shared entanglement, while classical 
communication serves to augment the limited power of 
classical correlations. 

Our main result is that 2 k classical bits are needed 
to simulate the distribution that arises from the quan- 
tum protocol's measurement on k entangled qubits. 



Our result is based on the analysis of sampling 
protocols for the set-disjointncss problem DISJ(x,y) 
[ASTS+98]. In that paper, the authors demonstrate 



that the set-disjointness problem can be sampled using 
O (log(n) log(l/e)) qubits of communication between 
two parties, while classical sampling of set-disjointness 
requires 8(y / n) classical bits, whether those bits are 
communicated on-line during the protocol, or are a 
cache of prior correlations. We cast these results in 
a different light, showing how this result holds for a 
protocol in which the parties share entangled bits. In 
particular, we demonstrate an efficient algorithm for 
sampling the set-disjointncss function DISJ(x,y) using 
O (log(n) log(l/e)) entangled bits and no other com- 
munication, which is again an exponential improve- 
ment over the classical sampling complexity of set- 
disjointness. These results show that there exist prob- 
lems for which classical simulation of an entangled state 
would require an exponential amount of communica- 
tion, demonstrating that classical correlations are less 
powerful than quantum correlations. 

Another intruiging element of this result is that in 
this quantum protocol each party maintains some se- 
cret information about their respective subset, so that 
parties do not have full information about the other 
parties' output. Such a protocol is fundamentally dif- 
ferent than known classical algorithms, where crypto- 
graphic schemes are necessary for A and B to stay ig- 
norant about each other's outputs. 

Within the community of quantum communication 
complexity research, there is growing body of work 
addressing the c ost of si m ulation of e ntangle m ent us - 



i ng classi cal bits |BCT99| , flMBCCOll , pP01 |, [|Stc99 | 



[CGMOOj, and similar work in the communication com- 
plexity of ent anglemen t [ BCvD97 |. The work of Bras- 
sard et. al. [BCT99 showed that 8 classical bits of 
communication suffice to exactly simulate a Von Neu- 
mann measurement on a Bell pair if an infinite random 
string is shared between two parties. That paper also 



shows a partial function for which an exact classical 
simulation of an entangled system of n qubits would 
require 2 n classical bits of communication. However, 
they left open the question of whether any classical 
simulation existed on a more robust quantum measure- 
ment scenario when that simulation allowed small er- 
ror, or was limited in the amount of bits available in 
prior correlation. Massar et. al. [MBCC01] showed 
that no protocol restricted to a finite amount of prior 
correlation could simulate the Bell pair, but that Bell 
states can be simulated without an infinite random 
string if the expected classical communication is finite. 

Our work differs from the models studied above be- 
cause we consider the the communication complexity 
of sampling rather than of functions or partial func- 
tions. Further, we demonstrate a protocol that is ro- 
bu st to smal l errors. Lastly, as shown in Massar et. 
al. |MBCC01 1 an infinite amount of shared randomness 
is too powerful to be used as a resource. As such, we 
quantify the total amount of classical information that 
is used in the protocol, counting the amount of prior 
correlations as well as the amount of communicated 
bits. Finally, we believe that the sampling model is 
more appropriate for investigation of quantum com- 
munication complexity problems since measurement of 
a quantum mechanical system is inherently a sampling 
process. 

In U we discuss classical and quantum sampling pro- 
tocols and introduce our restricted quantum protocol 
for sampling- using-entanglement. In || we state the 
problem of set-disjointness, and introduce an sampling- 
wit h- entanglement protocol for it. Section || con- 
tains the main theorem proof of the upper bound 
on the communication complexity of sampling-using- 
entanglement for the set-disjointness problem, while 
H presents the proof of the main lemma for this re- 
sult. In U we present the classical sampling results 
for set-disjointness, demonstrating an exponential gap 
between the communication complexity of sampling- 
using-entanglement and communication complexity of 
classical sampling. 

2. Preliminaries 

Consider a scenario in which two parties, Alice and 
Bob wish to output samples according to some known 
joint probability distribution. They share \iPab), a bi- 
partite entangled state of k quantum bits, but they 
cannot communicate classically with each other. A 
simple protocol, labelled {Ua, Ub, \^ab)} , samples a 
probability distribution as follows: each party per- 
forms a unitary operation, Ua and Ub, respectively, 
on their portions of the entangled system \4>ab), and 



additional ancilla. Then, each party performs a mea- 
surement in the computational basis and outputs the 
results. Since a measurement of a quantum system re- 
sults in a classical probability distribution, this proto- 
col samples from the classical probability distribution 
II {Ua, Ub, \iPab}} induced by performing a measure- 
ment Ua <8> Ub on \4>ab)- For shorthand, we will refer 
to a unitary operation and subsequent measurement 
in the computational basis as a generalized mea- 
surement, and say that the protocol samples a state 
{Ua <8> Ub) \^ab) to mean that the protocol outputs 
samples according to the classical probability distribu- 
tion n{U A , U B , \^ab)} ■ 

Now imagine Alice and Bob collude; that is, they 
claim to share an entangled state, but in reality they 
have only classical communication and prior classical 
correlations available to them. They will again be given 
unitary operators and asked to output measurements 
according to II {Ua, Ub, \iPab)}- In order for them to 
succeed in convincing a third party that they share en- 
tanglement, they must "simulate" this quantum pro- 
tocol by outputting results according to a probability 
distribution that is e-close to the probability distribu- 
tion II {U A , U b , \^ab)}- 

We now define formally a two-party quantum proto- 
col for the sampling- using-cntanglcmcnt of \iPab) and 
the subsequent classical simulation of such a protocol. 
To do so, we includ e an intermediate definition of q- 
sampling [ASTS + 98 where the protocol that samples 
\iPab) not only outputs values according to the distri- 
bution of \iPab) but creates a pure state that is close 
to the \i(>ab) desired. 

Definition 1 Let \4>ab) be a bipartite entangled state, 
and let Ua and Ub be unitary operators. A two- 
party sampling-using-entanglement protocol Q is 

a quantum protocol executed by Alice and Bob as fol- 
lows: Alice and Bob perform their respective unitary 
operators on their portions of the \i/>ab) and some addi- 
tional ancilla. Then, each party performs a generalized 
measurement in the computational basis. The two par- 
ties do not communicate in any other way. This proto- 
col outputs samples according to the classical probabil- 
ity distribution II {Ua, Ub, \iI>ab)}, defined as probabil- 
ity distribution induced by performing a measurement 
Ua®Ub on \iPab)- Further, we say that Q q-samples 
a state |*) if (^\{U A <8> U b )\iPab) > 1 - e. The com- 
munication complexity of sampling-using-entanglement 
is the number of quantum bits shared between the two 
parties. 

Definition 2 Let Q be a sampling-using-entanglement 
protocol as above that samples the distribution 
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H{Ua, Ub, \iPab)}- Let P be a two-party classical pro- 
tocol P where each party is computationally unbounded. 
We say P is a classical simulation of Q if P outputs 
samples x and y according to a distribution II' (P), such 
that that \W(P)-II{Ua,Ub,\^)}\tvd < e, where the 
norm is the Total Variational Distance. The communi- 
cation complexity of P is k + m, the sum of the number 
of classical bits of communication (k) and the number 
of classical bits of correlation (m) . 

The classical simulation does not need to simulate 
the specific quantum state or its overall phase infor- 
mation; it only matches the overall probability distri- 
bution. However, the quantum sampling protocol we 
describe is more restrictive, and matches the appropri- 
ate quantum state, as well as the resulting distribution. 

In previous literature ]ASTS+98[ , the communica- 
tion complexity of classical sampling is defined as the 
number of classical bits of communication needed to 
sample a function. This definition is equivalent to the 
number of bits of correlation needed to sample /. 

3. Discussion 

The main result of this paper is to answer the ques- 
tion of whether all quantum measurement scenarios can 
be simulated with only a polynomial number of clas- 
sical bits. We demonstrate that the answer is no, by 
showing that already established results in quantum 
communication complexity can be applied directly to 
this problem and provide the answer. 

The main technical theorems of this paper were first 
proved by Ambainis et. al. [ ASTS+98 in a paper 



comparing the classical and quantum communication 
complexities of sampling. While we provide the de- 
tails of those theorems again for completeness, our 
main result is to show that those results apply directly 
to a new communication protocol of sampling-using- 
cntanglcmcnt. A sampling-using-entanglement proto- 
col is equivalent to a quantum measurement scenario: 
both protocols involve each party performing a gener- 
alized measurement on their portion of the entangled 
state. 

Prior work in quantum information theory has failed 
to answer the question of whether all larger non- 
separable entangled systems could be simulated with 
even a polynomial number of bits. However, by apply- 
ing the communication complexity results for sampling, 
we find that if such a scenario could be simulated with 
less than an exponential number of bits relative to the 
quantum scheme, then we could beat the classical sam- 
pling bound proven in Ambainis et. al. Therefore, any 
classical simulation of such a quantum measurement 



scenario must match the classical communication lower 
bound on sampling. We use the results of Ambainis et. 
al. to demonstrate a quantum measurement scenario 
for the set-disjointness problem on n entangled qubits 
cannot be simulated with less than 2™ classical bits of 
communication or correlation. 

4. Results for sampling of set- 
disjointness 

We now show that there exists a sampling-using- 
entanglement quantum protocol for the set-disjointness 
problem that uses only 0(log n log 1/e) qubits. This re- 
sult provides an exponential speedup over the classical 
sampling result for set-disjointness, where 0(y / n) clas- 
sical bits of communication and shared randomness are 
required. The treatment provided here is based on the 
treatment in Ambainis et. al, but differs greatly in its 
organization and presentation. 

Formally, the problem of sampling set-disjointness 
(for size ^/n) is defined as follows: Given a set 
f2 = {l,...,n}, two parties A and B sample the 
set-disjointness function if they output uniformly ran- 
dom disjoint subsets S and T respectively, S, T e ft, 
\S\ = 1^1 — Q(y/n). Let \x) be the superposition 
representing all possible disjoints subsets of size y/n: 
\x) = J2i jn<$ K) b) ■ A protocol can quantum sample |x) 
if it creates a state \<j>) which is close to \x)- The trivial 
sampling-using-entanglement protocol quantum sam- 
ples this function: it simply measures \x) in the com- 
putational basis. However, the number of qubits neces- 
sary to express \x) is log (J^-) « y^logn, which does 
not improve upon the classical sampling complexity of 
this problem. Instead, we will show that there exists a 
smaller bipartite system that contains nearly all of the 
necessary information about |%). Specifically, we will 
construct a pure state \ip) of only 0(log(n) log(l/e)) 
entangled qubits which when operated upon by local 
unitary operations Ua and U b yields a state which is 
an e-approximation for \x). 

Theorem 1 There exists a basis V for \x), the super- 
position ranging over all possible disjoint subsets of size 
yjn with the following property: L et \ip) be the projec- 
tion of \x) onto the subspace spanned by the largest 
n i°gi/e eigenvectors of V . Then (%| (V <8> V) 1^) > 
1 - e. 

5. Proof of Main Theorem 

Proof: We begin by using a matrix representation 
for states and the unitary operators. Consider \x) as 
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above, written as 



\x) 



/ ' ' 1-3 

i,3 



rriij\i)\j) where 



in j = 
in j + 



Let M x be the linear operator corresponding to the 
matrix representation for |%): M x — [my], where M x s 
rows are indexed by \i) and columns by \j). 



Remark 1 Given a state 
trix representation = [m 
Ua and Ub, the matrix representation for the state 
(U A ® U B ) 10) is U A M^UI Q 



Ei,i m i,#)li); a ma " 
h jl, and unitary operators 



Using the representation, a rotation of a state |^>) into 
the V basis can be written as VM^V'. This notation 
is particularly useful because it allows us to compare 
the norms of pure states by comparing the trace norms 
of their matrix representations. We define the trace 
norm of a matrix M as ||M|| = ^Tr (MtM). 

Remark 2 Given states \ip) and \x), their correspond- 
ing matrix representations and M x , and a basis 



V, then for every e, if \\VM^ - M x \ 
bc\(y®V)\1>) >l-e. Q 



< 2e, then 



With the above two facts in place, it remains to 
prove that there exists an appropriately-sized basis for 
the matrices representing our bipartite quantum states. 

Lemma 1 There exists a basis V = {vi, . . .v n } for 
M x such that the linear operator M^, the projection of 
M x onto the subspace spanned by n 108 ' 1 /*^ eigenvectors 
of V corresponding to the largest rz log ^ 1 / £ ) eigenvalues, 
is within 2e of M x : 

WVM^ - M x \\ 2 < 2e 

The proof then follows. ■ 
Intuitively, this proof follows from the fact that we 
need only a small number of basis vectors to closely 
approximate any vector in the vector space of the linear 
operator M x . We can then rotate that system of basis 
vectors back into a larger space and achieve a linear 
operator that is close to M x . In subsequent sections 
we prove the associated lemma. 

6. Classical Bound comparison 

We now return to the issue of simulation of quantum 
measurement. Since the sampling- using-entanglement 



protocol is equivalent to a quantum measurement sce- 
nario that samples set-disjointness, any classical sim- 
ulation of this quantum measurement scenario would 
need to classically sample set-disjointness. But by Am- 



bainis et. al. [ASTS + 98|, the lower bound for classical 
sampling of set-disjointness is Q(^/n). Therefore, any 
classical protocol simulating the the quantum measure- 
ment scenario of set-disjointness must use tt(y/n) bits 
of communication. This demonstrates an exponential 
gap between sampling-using-entanglement and classi- 
cal s ampling , and shows that the result of Brassard et. 
al. BCT99 that a Von Neumann measurement on a 
Bell pair could be simulated with a constant number of 
classical bits of communication does not scale to larger 
quantum measurement scenarios on systems of qubits. 

7. A cryptographic protocol 



This protocol shows that given a small initially en- 
tangled state, by performing unitary operations on that 
state and some ancilla, we can rotate into a larger 
space. But because the original entangled state resided 
on a smaller subspace, parties A and B do not have 
full knowledge of each other's final output. Indeed, the 
are only aware of 0(log(n) log (1/e)) bits of informa- 
tion of each others output, rather than ^Jn bits. This 
is a fundamental difference over classical information 
theory, where the existence of cryptographic one-way 
functions is necessary to achieve the same "hidden" 
bits in a sampling protocol. 

We believe that this amount of hidden information 
could be used to create future cryptographic protocols 
for property testing. Those result will be shown in a 
later version of this paper. We also believe that this im- 
balance between hidden information and classical sim- 
ulation results is an interesting area for future research 
into the power of entanglement. This idea addresses 
some of the concerns expressed in Collins and Popescu 
[ CP01 1 , who raised the question of what particular be- 
havior of entanglement is quantum-mechanical. We be- 
lieve that the hidden bits here may directly answer this 
question. 



1 To see the proof of this remark, please refer to the Appendix. 
2 To see the proof of this remark, please refer to the Appendix. 



8. Proof of Lemma 1 

Proof: We begin by assuming that such a basis exists, 
and consider the t eigenvectors that correspond to the 
largest t eigenvalues. We derive conditions on the value 
of t that succeeds in achieving an approximation bound 
of 2e. 

Let V be a basis of eigenvectors for M x : M x = 
VKV\ where A is the matrix of eigenvalues. Let Vt 
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denote the subspace denned by the first t eigenvectors 
of V. We define M' as the linear operator created by 
projecting M onto the subspace of the first k eigenvec- 
tors in V. 



IVM'V^ - M v 



= \\\VM'V^ -VAV^\ 
= \\V{M'-A)V*f 

= \\m'-M\ 2 

= \\V t M x V? - A\f 
\v\ 

= E A * 2 



i>t 



Therefore, \\VM'V^ - M x \\ 2 < 2e if V < 2e. 
We continue by characterizing the eigenvalues of M x , 
and use this information to derive a bound on t to 

ensure Y}i>t ^ < 2e - 

M x can be written as a linear combination of the 
ones matrix and a related matrix B = [bij] of size 
N — O by N = (^) , whose rows are indexed by |i), 
columns by \j), and = 1 if in j = 0,-1 if in j 7^ 0. 
Since M x is a linear combination of B and the ones 
matrix, B has the same eigenvectors as M x . 

B is real and symmetric, and therefore has an or- 
thonormal set of eigenvectors W — {wi, . . . , wn-i}- 
Using a result of Lovasz for B \ Lov79 1 , we characterize 
the eigenspaces of B as follows: 



Lemma 2 l Lov7&l B has k + 1 eigenspaces. 
Eigenspace Eq is of dimension 1 and contains 
the all l's vector. Ei has dimension (™) — ( J . 
The typical eigenvector in Ei is indexed by 
xi,... ,X2i-i,X2i € {l,...,n}. The correspond- 
ing eigenvector e (unnormalized) is given by: es = if 
there is an index j : \S R {x2j-i,X2j}\ 7^ 1, otherwise 
es — Hj(—l)' Snx2i ^' ■ The corresponding eigenvalues 

are A = ^"Cl"^ , and A, = ^""T ^ ■ 
(k) (k) 

The first g eigenspaces contain less than g(^j < 
n 9+1 eigenvectors. Setting t = n 9+1 , we wish to show 
that we can pick g small enough to satisfy >t < 
2e. 

A projection of a row of B onto subspace is the 
sum of the row of B onto each vector w spanning Ei . 
Let qi be the square of the length of the projection of 
a row b onto the subspace Ei. Since the value of such 
a projection is A^, then qi = ^2 weE . X% 2 - Therefore, 

\V\ k+l k 



Since each Ei has dimension (™) — ( "1)) Ei has 
(1) — ( -1) e ig envec tors, each with value A^ = - . 
Therefore, 

n W z \ k-i ) 



i - 1, 



(I) 



Next, we show that the projections decay rapidly, 
by showing the relative change between qi and qt+i- 



Qi+i 



" \ I " ) ) I 2 ( fc-(i+l) ') 



, » v i / 2 ("fc-i ') 



< 



< 



2n (fc-i) 



i + 1 (n-k-iY 
2 



2n /2fc 



i+1 V n 



i>t 



i>g w£Ei 



lik = Q(y/n), then ^i±I = 0(^-). Therefore, g 9 < f. 
Choosing g to be fclognlog(l/e)/loglog(l/e)), 

k k 

® = £ C V« < c 9 /.9i < c 
Since Ei>tA 2 <E^*, 

With g = 0(log(l/e)/loglog(l/e)), the total number 
of eigenvectors needed is bounded above by n 9+1 = 
O(n logl / e ), and therefore only 0(lognlog 1/e) entan- 
gled qubits are needed to perform the protocol. This 
completes the proof. ■ 
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A. Proof of Remark 1 

We prove that given a bipartite state and local 
unitary operations U and V, we can write the result 
of (U <g> V) \tp) as UMV^ where M is the matrix rep- 
resenting \ip). 
Proof: 

A and B want to perform U <g> V on a bipartite state 
\cf)) = <f>ij\i)\j)- The coefficient fcj refers to the 
probability amplitude that a measurement of the state 
\<f>) will yield |z) to party A and \j) to party B. Per- 
forming the unitary operation U ® V on \4>) changes 
the coefficients to \cf))' according to the rule 



= ((ith row of U (£> jth row of V[ 

= ^ ^ UikVjm<t>km 



k m 



= y^^y^ v jm (j>kTi 

k m 
= ^ Uik ^ fikmVjn 



(AV T ) 



(UAV T ) t3 



(UMV T ) t3 



Now, we show that in the matrix formulation, U <8> 
V\4>) = UMV^ . Beginning with a matrix M, we show 
the values of the matrix UMV^ . 

n 

{UM)ij = J2 U i* M V 
fe=l 

n 

^ ^ Ai m Vjm 

^ ' Uik I ^ ' Ak m Vj m J 
k \ m / 

Uik I ^ MkmVjm ) 
k \ m ) 

Hence, these two formulations are equal. ■ 
B. Proof of Remark 2 
Proof: 

Note that Tr (Mt M x ) = (x\x), since Tr (M x ) f M x = 
(M x ) i j . But since this matrix consists of all the el- 
ements of |x), this result is £V (M x%j ) = (xlx)- 

We rewrite ||VM^,Vt — M x \f in terms of the trace 
norm: 

\\VM^ - M x \f = 

Tr((VM^Vt) f (VM^Vt)) - 

2Tr (M^VM^V 1 ) + Tr (M x f M x ) 

Since the trace is invariant under basis transformations, 
and VtV = /, 

Tr((VM VJ V t )) t (VM^V t ) = Tr ((vM^VM^)) 



: Tr | ( M\,M^ 



)) 



£(M^)=(V#> 



Continuing, we see that 
-2Tr (vM;vtM x ) = 



-2Tr 



(Vm^VAV 1 

2Tr (m;a) 
2(V,000|| X ) 



where (000 1 represents an ancilla, so that the |x) and 
\ip, 000) lie in the same vector space. 
Therefore, 

\\VM^~M x \f = (V#> + <X|X>-2(V,000|X> 
= 2-2(V, 000|x) 
< 2e 
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Therefore, (xlV 1 ) 000) > 1 — e. Since unitary op- 
erations on pure states cannot change their length, 
( x |^, 000) = (x\V®V\tp, 000) > 1-e. ■ 



